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Abstract 

We present a new variant of the quantum adversary method. All adversary methods give lower bounds 
on the quantum query complexity of a function by bounding the change of a progress function caused by 
one query. All previous variants upper-bound the difference of the progress function, whereas our new 
variant upper-bounds the ratio and that is why we coin it the multiplicative adversary. The new method 
generalizes to all functions the new quantum lower-bound method by Ambainis [Amb05, ASW06] based 
on the analysis of eigenspaces of the density matrix. We prove a strong direct product theorem for all 
functions that have a multiplicative adversary lower bound. 

1 Introduction 

We consider the problem of proving a lower bound on the number of quantum queries needed to compute a 
function with bounded error. One of the most successful method for proving quantum query lower bounds 
is the adversary method [BBBV97, Amb02, HNS02, BS04, BSS03, Amb06, LM04, Zha05, SS06, HLS06]; see 
the survey [HS05] for the history of the method. It intuitively works as follows: The computation starts 
in a fixed quantum state independent of the input. The quantum algorithm consecutively applies arbitrary 
unitary transformations on its workspace and the input oracle operator. The quantum state corresponding to 
two different inputs x, y gradually diverges to two output states IV'J)) IV'J)- Since the algorithm has bounded 
error, there exists a measurement on the output state that gives the right outcome with high probability, 
hence the scalar product KV'JlV'J)! must be low whenever f(x) ^ f(y) [BV97]. We define a progress function 
in time t as a weighted average of these scalar products over many input pairs: 

W* = J2 w *>y^M- (!) 

x.y 

f 

Since the scalar products are all one at the beginning and below a constant at the end, the value of the 
progress function must drop a lot. On the other hand, one can show that one query only causes little additive 
change to the progress function, hence the algorithm must ask many queries. The quality of the lower bound 
depends on the adversary matrix w — one typically has to put more weight on input pairs that are hard to 
distinguish to get a good bound. 

The progress function can be cquivalently formulated in terms of density matrices. If we run the quantum 
algorithm on a superposition of inputs instead of a fixed input, then during the computation the algorithm 
register becomes entangled with the input register. We trace out the algorithm register and look at the 
reduced density matrix p\ of the input register. We define the progress function as a linear form 

W t = (T,p t I ) (2) 

for some Hcrmitian matrix T with T[x, y] = if f(x) = f(y). This definition is equivalent with Eqn. (1) (see 
Section 2), and since it is easier to work with, we will stick to it in the whole paper. 
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The (additive) adversary method suffers one severe limitation: the lower bound is proportional to the 
success probability of the algorithm and hence is negligible for exponentially small success probabilities. 
Several many-output functions, such as t-fold search, however, have strong lower bounds even with expo- 
nentially small success [KSW07] (proved first using the polynomial method [BBC + 01]). These bounds are 
useful for proving quantum time-space tradeoffs. 

Ambainis reproved [Amb05] and extended [ASW06] these polynomial lower bounds using a new quantum 
lower-bound method based on the analysis of subspaces of the reduced density matrix of the input register. 
His method seemed tailored to the problem of quantum search, and is quite complicated. 

In this paper, we reformulate Ambainis's new method in the adversary framework, generalize it to all 
functions, and provide some additional intuition. We use syntactically the same progress function Eqn. (2), 
but in a different way: (1) we require different conditions on the adversary matrix F, and (2) we show that 
one query can only multiply the value of the progress function by a small constant — thereout the name 
multiplicative adversary. Surprisingly, the final formula for the multiplicative adversary lower bound is quite 
similar to the additive adversary. Unfortunately, the similarity is only illusive, and our new formula is 
significantly harder to bound than the old one and we thus don't simplify Ambainis's calculations much. 

We, however, split Ambainis's original proof into several independent logical blocks and dovetail them 
together: upper-bounding the success probability based on the structure of the subspaces, upper-bounding 
the change caused by one query, simultaneous block-diagonalization of T and the query operator, and sim- 
plification of the final formula into a form similar to the additive adversary. This simplification allows us to 
generalize the method to all functions. Furthermore, we separate the quantum part and the combinatorial 
part of the proof — the quantum part is hidden inside the proof of the general lower-bound theorem (Sec- 
tion 3), and the user of the method who wants to get a lower bound for some function only has to evaluate 
its combinatorial properties (see Section 4 for new proofs of all known bounds in our new framework). 

Finally, we show that the multiplicative adversary bound inherently satisfies the strong direct product 
theorem (DPT). Roughly speaking it says that to compute k independent instances of a function we need 
fi(fc) times more queries even if we are willing to decrease the (worst-case) success probability exponentially. 
It is not clear whether this theorem holds for all functions or not. Ambainis proved a (more complicated) 
DPT for all symmetric functions directly, whereas we show that it is sufficient to prove just a (simpler) 
multiplicative adversary lower bound, and the DPT then automatically follows (Section 5). 

The biggest open problem, not addressed here, is to find a new stronger lower bound using the multi- 
plicative adversary. A promising function is the element distinctness problem (tight f2(n 2 / 3 ) bound due to 
the polynomial method [AS04], but only tl(y/n) adversary lower bound). It also doesn't seem completely 
unlikely that one could find a reduction from the additive adversary to the multiplicative adversary — if a 
lower bound for some function can be proved using one method, then it can be proved also using the other 
one. If this is true, then many extensive computations could be avoided. The multiplicative adversary 
method may also have potential to prove a quantum time-space tradeoff for some Boolean function (again, 
element distinctness), because small workspace implies small Schmidt-rank of the reduced density matrix. It 
would be interesting to look at the dual of the multiplicative adversary bound. The bound is not described 
by a scmidefinite program, however one may be able to use general Lagrange multipliers. 

2 Adversary framework 
2.1 Quantum query complexity 

As with the classical model of decision trees, in the quantum query model we wish to compute some function 
/ and we access the input through queries. Let / : X — * So be a function, with ACS™ the set of inputs. We 
assume S/ = {0, 1, . . . , a — 1} with a = |S/|, and call this the input alphabet and Sq the output alphabet. 
The complexity of / is the number of queries needed to compute / on a worst-case input x. Unlike the 
classical case, however, we can now make queries in superposition. 

The memory of a quantum query algorithm is described by three registers: the input register, Hi, which 
holds the input x £ X, the query register, Hq, which holds two integers 1 < i < n and < p < a, and the 
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working memory, Hw, which holds an arbitrary value. The query register and working memory together 
form the accessible memory, denoted Ha- 

The accessible memory of a quantum query algorithm is initialized to a fixed state. For convenience, on 
input x we assume the state of the algorithm is 0}q|0)w where all qubits in the working memory are 

initialized to 0. The state of the algorithm then evolves through queries, which depend on the input register, 
and accessible memory operators which do not. We now describe these operations. 

We will model a query by a unitary operator where the oracle answer is given in the phase. This operator 
is defined by its action on the basis state as 

0:| a ?)|i,p)-^e^***| a :)|<,p), 

where 1 < i < n is the index of the queried input variable and < p < a is the phase multiplier. This 
operation can be extended to act on the whole space by interpreting it as x where \w is the identity 
operation on the workspace Hw- hi the sequel, we will refer to the action of both on Hi <g> Hq and the 
full space Hi (£> Hq (£> H w > and let context dictate which we mean. 

For a function with Boolean input = {0, 1}, the query operator simply becomes 

0:\x)\i,p)->{-lY"*\x)\i iP ), 

An alternative, perhaps more common, way to model a quantum query is through an operator 0' : 
\x) \i, p) — > \x)\i, (xi +p) mod a) that encodes the result in a register. These two query models are equivalent, 
as can be seen by conjugating with the quantum Fourier transform on \p). For our results, it is more 
convenient to work with the phase oracle. 

An accessible memory operator is an arbitrary unitary operation U on the accessible memory Ha- This 
operation is extended to act on the whole space by interpreting it as lj(g) U, where 1/ is the identity operation 
on the input space Hi- Thus the state of the algorithm on input x after t queries can be written 

|0*)=U t OU t _i.-.U 1 OU o |a:)|l > O)|O). 

As the input register is left unchanged by the algorithm, we can decompose |</>*) as |</>*) = where 
is the state of the accessible memory after t queries. 
The output of a T-query algorithm on input x is chosen according to a probability distribution which 
depends on the final state of the accessible memory \ip^}. Namely, the probability that the algorithm outputs 
some b € £o on input x is ||II&|^>J) || 2 , for a fixed set of projectors {II;,} which are orthogonal and complete, 
that is, sum to the identity. The e-error quantum query complexity of a function /, denoted Q e (f), is the 
minimum number of queries made by an algorithm which outputs f(x) with probability at least 1 — e for 
every x. 

2.2 Progress function 

Imagine that we run some quantum algorithm on a superposition of inputs \5) = ^2 xeX 3x\x)\l,0)\0). The 
quantum state after t queries is 

= U t OU t -i---UiOUo|<J> =X} <y *l a? M>- 

X 

The reduced density matrix of the input register is 

p\ = ^\^){^\ = ^2s x s;{^t)-\x){y\. 

x,y 

We define a progress function in terms of the reduced density matrix of the input register and a special 
Hermitian matrix T, coined the adversary matrix. We then present two kinds of adversary method, each 
using the progress function in a different way to get a quantum query lower bound. 
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Definition 1 Let Y be an \X\ x \X\ Hermitian matrix. Let (A, B) = Tr(A*B). Define the progress function 

w* = <r,/4). 

Note that W l is a real number, because both T and p\ are Hermitian. 

In the paper, we will use the following matrices. 
Definition 2 Define the following set of \X\ x \X\ matrices indexed by i £ [n], p € Sj, and z G Eo- 

[0 x t = yi 

Di's are real (zero-one) symmetric matrices. Oi iP 's are diagonal unitary matrices decomposing the query 
operator = ©" =1 ® pe s f Oj jP . {F z } z gs G is a complete set of diagonal orthogonal projectors, that is 
J2 Z = !; F Zl F Z2 = for zi ^ z 2 , and F 2 Z = F z . 

2.3 Additive adversary 

In this version of the adversary method, one upper-bounds the difference of the value of the progress function 
caused by one query This method is the original adversary method, developed in a series of papers [BBBV97, 
Amb02, HNS02, BS04, BSS03, Amb06, LM04, Zha05, SS06, HLS06]. 

Theorem 1 ([HLS06]) Let T be a nonzero \X\ x \X\ Hermitian matrix such that T[x,y] = for f(x) = 
f{y). Consider a quantum algorithm with error probability at most e and query complexity T. We run it on 
the superposition of inputs \5) , where 8 is a normalized principal eigenvector ofT, i.e. corresponding to the 
spectral norm \\T\\ . Then 

1. W° = \\T\\ 

2. W* - W t+1 < 2 maxj ||T o D,\\ for every time step t = 0, 1, . . . , T - 1 

3. W T <2{^7(r= T)+e)-\\Y\\ 

The third item can be strengthened to 2y/e{\ — e)||r|| if / has Boolean output [HLS06]. 
Corollary 2 ([BSS03, HLS06]) For every sufficiently small e, 

Q e (f) > ADV e (/) d = f - (\ V^~e) - e) max H 

\2 J r maxj ||i oiJ, ; || 

If all coefficients of the adversary matrix T are nonnegative, then T corresponds to a hard distribution 
over input pairs and its principal eigenvector 6 to a hard distribution over inputs. The initial value of the 
progress function W is large, because all scalar products are one in the beginning, and it must decrease a lot. 
This is because the weight is only put on input pairs evaluating to different outputs, whose scalar product 
must be low at the end, otherwise one would not be able to distinguish them. This intuition does not tell 
the whole truth if some coefficients are negative, but the adversary bound still holds. 

3 Multiplicative adversary 

In this version of the adversary method, one upper-bounds the ratio of the value of the progress function 
before and after a query. This method is a simplification and generalization of the new adversary method 
developed by Ambainis [Amb05, ASW06]. Here, T has a different semantics. We require the eigenspaces of T 
corresponding to small eigenvalues to be spanned by vectors (superpositions of inputs) that do not determine 



and F z \x, x] = 



1 f(x) = z 
f(x)^z 
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the function value with high probability. The algorithm is then run on a superposition \6) corresponding to 
the smallest eigenvalue (which is typically a uniform superposition of all inputs), and the progress function 
W is slowly increasing (instead of decreasing) in time. To achieve good success probability, most of the 
quantum amplitude must move to the higher subspaces. 

Theorem 3 Let T be positive definite with smallest eigenvalue 1; then W l > 1. Fix a number 1 < A < ||r||. 
Let Ilbad be the projector onto the eigenspaces of T corresponding to eigenvalues smaller than X. Assume 
that ||F z ribad|| 2 < V for every output letter z G So- Consider a quantum algorithm with success probability 
at least rj + A^ and query complexity T. We run it on the superposition of inputs \5), where 6 is a normalized 
eigenvector ofT with Y5 = 8. Then 

1. W° = 1 



2. W y^ t < max, p ||r i p /r||, where T i p = 0| rOj ;J , and r i j3 /r denotes T^ p T 1 

3. W T > C 2 A 



Corollary 4 



Qi-„-4<(/) > MADV„,4c (/) = L max ■ 



r.A log(max ljP ||I\p/r||) 

Proof of Theorem 3(1) Trivial, because (^\tp°) = 1 and thus W° = (T,p°j) = S*T5 = 1. □ 
Proof of Theorem 3(2) After the (t + l)-st query, the quantum state is |\E'* +1 ) = Uf+iO|^E' t ) and thus 

p\ +1 = Tr(U t+1 0|v&*)(**|0*U* +1 ) = TrtOI^K^IO*), 



I 1 / 



because the unitary operator Ut+i acts as identity on the input register. The oracle operator only 
acts on the input register and the query register, hence we can trace out the working memory. Denote 
p = Tr/,g !*')(** | and p' = OpO*. Then p\ = Tri(p) and p l j +1 = Tr I (p / ). We re-express the progress 
function in terms of p 1 p' . Define a block-diagonal matrix on TLj ® Tin: 



g = t® i n ® \ a = 0" r. 



'pes, 
Then 

W t = (T,p t I ) = (G,p) 
W t+1 = (r,p t + 1 ) = (G, P ') = (G,OpO*) 
= (0*GQ,p) = (G',p), 

where G' = 0*G0 = is a block-diagonal matrix with T^p's on the main diagonal. 

We upper-bound the change of the progress function as follows. We show that 

{G',p} <max||r ilP /r||.(G,p). (3) 

Since the scalar products (G, p) and (G', p) are linear in p and mixed states are convex combinations of pure 
states, it suffices to show this inequality for pure states p = \p){p\. Since both T and all T^p's are positive 
definite, both G and G' are also positive definite. Let |t) = y/G\p), that is \p) = G~^|t). 



(G', P ) (p\G'\ P ) (T\G-tG'G-*\T) \\VvJG\t)\\ \ 
{G,p) (p\G\ P ) (r\r) [ |M| ) 

< WVGTGW 2 = \\G'/G\\ = maxH^.p/rll 

i,p 

We conclude that Eqn. (3) holds for pure states and consequently also for all density matrices. □ 
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Since the spectral norm of Ti tP /T is hard to upper-bound, we simplify it to a form similar to the additive 
adversary. 

Lemma 5 Fix the index of the queried bit i. Assume that T and Oi.i are simultaneously block- diagonal in 
some "basis", that is there exists a complete set of orthogonal projectors LT = {n^}^ such that T = ^2 ( T^ 

and 0;.i = ^2 e Of\, where denotes ILjITL). Note that since Oj jP — (Oi t i) p , all Oi tP are block- diagonal in 
this basis, too. Then 



^/ri^maxlirg/rwn 

where A m i n (M) denotes the smallest eigenvalue of M. 



2 max ■ 



,(rw) 



Corollary 6 Let T >z I and 1 < A < ||r||. Assume that ||F 2 ribad|| 2 < V for every z G So, where Ilbad is 
the projector onto the eigenspaces ofT smaller than A. For a fixed i, block- diagonalize simultaneously T and 
Oi l, and let r^' denote the l-th block. 

MADV„ 4C (/) > maxlog(C 2 A) • min ^f^y 



Note that for most functions, one typically docs not want to apply this statement using the trivial block- 
diagonalization II = {1} with just one projector onto the whole space. In this case, ||T o Di\\ is way too 
large compared to A m ; n (r) and the final bound is too weak. For some functions, such as unordered search, 
however, even this approach gives a reasonable bound; see Lemma 7. 

Proof of Lemma 5 Denote Yi tP = 0* „EOi tP , where E is the all-ones matrix; then T^ p = 0* p TOi p = ToYi p . 

Note that Y i — i J2 P Zo ^i,p = Qty summing a geometrical sequence depending on Xi — yi). Since T and 
all Oi :P are block-diagonal in LT, it follows that ^i, p , Ti iP /T, and ToDi are block-diagonal in II, too. Therefore 
it suffices to compute an upper bound on |jl\p/r|| in each subspace of II separately and take the maximum 
as the total upper bound. This proves the first part of the lemma that ||T;. p /r| = maxi ||rjp/r^||. 

Henceforth, fix the index i of one such subspace and let T := denote the matrix projected onto Hg. 



|r ilP r- 



T- r 



max ■ 



max 



\Fj, P w\ 
\\Tw\\ 



\\Tw\\ 



\Tw + (T iiP -T)i 
\\Tw\\ 
\(T itP - T)w\\ 



< 1 



< 1 + - 
M 

1 

= 1 + - 
M 

1 



< 1 



< 1 



\\Tw\\ 

I i^i,P 



r)w\\ 



w 



||(i\ p oD>-(r°AHI 



||(roy- ljP o Di)w\\ + ||(r o Di) w \\ 



ii 



|o; iP (roA)O iiP || + ||roA| 



Tw 



\Tw\\ > A min (r) 



- r = (t wp - r) o Dt 



(r o Di) o y 1iP -- 

Oi tP is unitary 



||ro All 

(T)' 



which proves the second part of the lemma, because T here denotes T^ e \ 
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Proof of Theorem 3(3) At the end of the computation, we measure the input register in the computational 
basis and the accessible memory according to the output projectors {IT}. Denote the outcomes x G X and 
b G So- Since the algorithm has good success probability, f(x) — b with probability at least rj + 4(. Let us 
prove an upper bound on this success probability in terms of the progress function. 

Let LTgood = I — LTbad denote the projector onto the orthogonal complement of the bad subspace, coined 
the good subspace. We upper-bound the success probability in the bad subspace by 77 and in the good 
subspace by 1. Consider the final state of the computation \^ T ); recall that pj = Tr/ |\f ,T )(*E rT |. Let 

l* bad > = llS^ft i l*s°°d) = ifeffjii , and = (n good ,pf) = ||n good |* T )|| 2 . (When using a projector 
on a larger Hilbcrt space than defined, we first extend it by a tensor product with identity. For example, 
I* bad) = ||(nlTd®U)|^ T jll , where A is the accessible memory.) Decompose 

|<J T ) = V / W|*bad) + V^good). 



Assume for a moment that the final state was l^bad) instead of \^ T ). We measure the accessible memory 
first and fix the output of the computation b G So, then we trace out the accessible memory completely and 
end up with a mixed state p over the input register (not necessarily equal to pj , because we remember b). 
We then measure the input register according to the projectors {F z } (set of inputs x such that f{x) = z) 
and test whether z = b. Now, for every z G So, including the right result z = b, 

Pr[obtaining z] = (F z , p) p is only supported on flbad 

= (F z , LTbadpLTbad) 



< 



< 



(n b adF 2 ribad,p) (A,B) < \\A\\ ■ \\B\\ tr 

nbadF z n ba d|| • \\P\\tr \\p\\tr = 1 

LTbad F z LTbad! | F 2 = F^ 

n bad F 2 • F.flbadH ||A.fl|| < \\A\\-\\B\\ 

ribadF 2 || • ||F z n ba d|| F 2 ,n b ad are Hermitian 

-bad | 



F z n h 



< r/. 

Therefore the success probability of the algorithm would be at most ij, had the input register been in the 
state l^bad)- The real output state is | V I' T ). Since the trace distance of these two states is 

|||* T ) - |*bad)|| < (1 " + < 2v^, 

by [BV97], the success probability on l^ 7 ") could be at most r\ + 4^/0. On the other hand, we assumed that 
the algorithm has success probability at least 77 + 4£, hence (3 > £ 2 . The progress function at the end takes 
value 

W T = (F, pj) > (A ■ n good , pj) =(3X> C 2 A, 
which is what we had to prove. □ 



4 Applications 

In this section, we reprove all known bounds obtained by the subspace-analysis technique of Ambainis. We 
only consider functions with Boolean input. The input oracle rotates the phase by a factor of (— l) pXi and 
the only nontrivial case is p = 1. We thus omit p and write just 0^, Ti instead of O^i, F^i. 
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4.1 Search 

Let X = {x £ {0, 1}™ : |a?| = 1} and Search„(a;) = i such that Xi = 1. In other words, there is exactly one 

I in an n-bit string and we have to find it. One can quickly estimate the multiplicative adversary bound as 
follows. 

Lemma 7 MADV n -i )4C (Search n ) = tt(( 2 ^/n). 

Proof Let q > 1 be a constant whose value we fix later. Define the following unit vectors: v = ^=(lj •••)!) 

and Vi = i 1 (1, . . . , 1, 1 — n, 1, . . . , 1) with 1 — n on the i-th position. Note that v _L Vi, but V{ X- v i f° r 

y/n(n-l) 

i ^= j. Define the following adversary matrix: 

r=(l-g)|«)(t;|+gl J (4) 

where I is the identity matrix. Y has two eigenspaces: Yv = v, and Yvi = qi'i. The success probability in the 
subspacc of v is rj = 1/n. Let A = ||r|| = q. 

We apply Corollary 6 with trivial block-diagonalization II = {I}. Then A m i n (L) = 1. T o Di consists of 
an 1 x (n — 1) block -^(1, • ■ ■ , 1) and its adjoint, hence ||L o Di\\ = \Jn — \ ■ {q — \)/n < (q— l)/ v / n. Hence 

MADV„- 1 . 4C (Search n ) > ]° g(C (5) 

2(q- 1) 

We set q = 2/£ 2 to make the logarithm positive. □ 

It turns out that the rough analysis in the previous lemma loses a quadratic factor in the success prob- 
ability. Let us compute exactly the eigenvalues of L^L" 1 . Thanks to the symmetry, it is sufficient to only 
consider one case i = 1. 

Theorem 8 MADV„-i. 4C (Search„) = f2(CV™)- 

Proof We use the same adversary matrix Eqn. (4). We could compute TiT -1 explicitly, but we instead 
choose to demonstrate the block-diagonalization process. Define a complete set of orthogonal projectors 

II = {II2, Iltriv} with a 2-dimensional subspace II2 = \v) (v \ + \ vi) (vi | and its orthogonal complement Iltriv = 
I -n 2 . Define \w 2 ) = n triv |i> 2 ) = \v 2 ) - («i|« 2 )M = J („-i)3 (°) 2 ~ n > h ■ ■ ■ , 1) for whicn v i - 1 w 2, and 
define similarly u> 3 , . . . , w n . Then II tr i v is spanned by u>2, ■ ■ ■ , w n . OiWi = Wi implies II tr i v Oi = n tr i v . Since 
Oi is unitary, Oi is block-diagonal in II. Now, 

n 2 r = |«><«| + gr|ui><t>i| 

and n tr i v r = q{\ — \v){v\ — K'i)(i>i|) = qYltm, and hence Y is also block-diagonal in II. We now analyze the 
diagonal blocks of TiL" 1 in this "basis". We already know that IItrivOi = Iltriv and hence TiL -1 = I on the 
trivial subspace. It remains to examine the non-trivial subspace II2. 
In the orthonormal basis {\v), 



1 0\ Qi= lf »-2 2V^1 



?/' 1 n \2Vn^l 2-7i 

and the eigenvalues of TiL" 1 = (^LOiL" 1 are 1 ± + 0(£). Hence \\Y l /Y\\ w 1 + ^0-, and by 

Corollary 4, the multiplicative adversary bound is 

MAnv fQ , s . iog(c 2 A) . iog(c 2 g)yg r 

M ADV„ - 1 ,4c ( Search„ > — - % _ ^ )/ ^ / _ ) > Vfr 

where we have used that log(l + x) < x. This is by a factor of y/q larger than the bound given by Eqn. (5). 
Again, we set q = 2/£ 2 and finish the proof. □ 
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4.2 t-fold search 

This is a generalization of the search problem, where we have to find t ones. Let I = {i£ {0, 1}™ : |x| = t} 
and Search tn (a;) = J such that J C [n], \J\ = t, and xj = 1. The additive adversary implies that the 
bounded-error quantum query complexity of Search i n is Q,(\/tn). The multiplicative adversary gives the 
same bound even for an exponentially small success probability! This whole section is based on the analysis 
by Ambainis [Amb05] translated to our framework. 

Theorem 9 ([Amb05]) For every t < f- e , MADV 2 -vj i2 -i/« (Search t ,„) = Q(y/tn). 

Proof Fix a 1 < q < 0(1) and set A = q 1 ! 2 . Define the following adversary matrix: 

t 

r = £yn SjJ 

where LTg denotes the projector onto the subspace S, Sj = Tj n T^-_ 11 and Tj is the space spanned by 

= J— \x) for J C [n] with | J| = j. 

v (t-i) ^ki=< 

V xj=l 

Denote lipj) = H T ± \ipj). These projected states are neither normalized nor orthogonal for j > 0. Denote 

j— i 

\ipj) = m4|7- Note that Sj is spanned by \ipj). 



Block-diagonalization of V and Oi. p Thanks to the symmetry it is sufficient to only consider the case 
i = 1 of querying the first input bit. As we say above, the only nontrivial case is p = 1. We present a 
complete set of orthogonal projectors II in which both T and Oi are block-diagonal. Let 



1 



j-l) 
j-b) 



E i 

x: \x\— t 
xi—b 
xj — 1 



for J C [n] such that 1 ^ J 



with Tj : b spanned by \ij> h j) with | J| 



i^) 

Ik!; II 



Let S jtb = T jtb n T J A -_ l b . Then the following holds: 
• Let \tp a / b ) denote the vector a^ijPj) +b\ifxj). Let 



Pi = 



t-J 



n-j 



03 



(6) 



We also denote them a, (3 if the index j is clear from the context. Note that a 2 + /3 2 = 1. Then 
\^ a /) e Sj and 
as |$}) and |$}). 



kj ) G Sj and |Vv ") € Sj+i [ 5WO6, Claim 15]. These two new vectors span the same subspace 
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• [ASW06, Claim 16] Sjfi and Sj^i have the same dimension and the mapping 

M'\0x 2 ■ ■ -x n ) — > ^2 \lx2---Xi- 1 0x£+i...x n ) 
e-.xe=l 

is a multiple M 1 = CjMj of some unitary operation on Sj^ — ► Sj t i that maps Mj : \ipj) — » \tpj)- 

• Pick any orthonormal basis {\<£j,i)}i for each Sj o (the defining basis is not orthogonal). For j < t, 
define projectors IL,y = \<Pj,t){<Pj,e\ + Mj\Lpj^} (ipj^\M* . Note that if some \<Pj,e) = then 

n w - |$><$| + I^X^I = \i> a /)(r/\ + Wj- a ){^y- a \ (7) 

due to the basis change mentioned in the first item above. Thus IX, = {IX, is a complete set of 
orthogonal projectors for Sj t o © or i equivalcntly, for the subspace of Sj U Sj+± spanned by 
and |"0ju{i}) with \ J\ = j and 1 ^ J. It follows that 

n= {ih. ! ... u {\<pt,t){<pt,i\}t 

2-dim projectors trivial subspace St,o 
is a complete set of orthogonal projectors for the whole input space T t . 

Let us verify that II indeed block-diagonalizes T and Oi. To compute the images of the basis states of each 
projector IF,^, we use a double decomposition like in Eqn. (7). First, since \<pj t e) £ S^o and Mj\ipjj) £ Sj t i, 
Oi\(fij t i) = \ipj t) and OiMj\<pj t) = — Mj\(pj t t), hence Oi is block-diagonal in II. Second, if we denote 
I'Pj'e) = a \ L Pj,i) + bMj\tpj^), then \(fi"f) £ Sj and \<fj'f a ) £ Sj+i, because both \ipj t t) and Mj\(pj^) arc 
just linear combinations with the same coefficients of states and \ipj) respectively. We conclude that 
V\ip"f) = q j \(p"f) and r\(pP'f a ) = q-* +1 \<Pj'^ a ), hence V is also block-diagonal in II. 

Eigenvalues of T\/T on Ilj/ Consider the orthonormal basis B\ = {\(pj,£),Mj\ipj t t}} of IIf,^. Let U = 
(/3 —a) denote the self-adjoint unitary operator changing the basis from B-2 = {\<P^f), \<Pj f~ Q )} to B\. Then, 
in the basis B\, 

n< - (I \) « it A) u " (I -°.) u ('»' 



r r- 1 



'7 



/3 2 + c^g 



A straightforward calculation shows that TiT Ilf^ has eigenvalues 

1 + 2a 2 /? 2 (g ~ 1)2 ± 2a/3^-i V(« 2 + /3 2 g)(/? 2 + a 2 q). 



We use a trivial upper bound a < 1 , and an upper bound P < y/ufn [ASW06, Claim 19], which easily follows 
from the (non-trivial) computation of ||^j|| = a/^t^-tt^- [ASW06, Claim 18]. By using 1 < q < n/t, and 
q = 0(1), we obtain 

lirxr- 1 ^,,!! < 1 + Ifcil! + 2 M^±y/z( q + 2t/n) < 1 + 6<R q - 1) + o(£). 

nq y n q \ nq 
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Eigenvalues of Ti/T on the trivial subspace Let us revisit the trivial subspace St,o an d make sure 
that the block-diagonalization is right there, too. We claim that St,o C St- Since \tpj) = \ipj) for |J| = t and 
1 g J, we get T tj0 C T t , and thus it suffices to prove 5 4 = T tfi n T t -i,o C T^. It 'holds that T t)0 C T t ^ 1 A 
due to a different value of the first input bit. Also, we know that Tj C T ji0 ® Tj,i, hence T± n C T/- 
and the proof is finished. 

Let \w) € St ft- \w) is an eigenvector of T, because it lies in St. Since Oi|w) = \w), we conclude that 
Tir -1 !?./.;) = \w) and St o is indeed a trivial subspace. 

Upper-bounding rj Since A = g*/ 2 , we have to upper-bound ||F Z |</3)|| 2 < -q for all \tp) 6 T t / 2 . Since the 
dimension of T t / 2 is ( t ™ 2 ) and the number of possible outcomes is ("), using [Nay99], the success probability 
is at most 77 < ( t ? 2 )/(™). Using the bounds (f ) k < (™) < (ef ) k and assuming i < f e , 



,<W<«^=f-V /2 <^ /2 

' - ? - ? * I n ) ~ 



ft) " (f) 4 

By being more careful, one can prove an exponentially small upper bound on 77 for all t < § . 

Multiplicative adversary bound Since A = q 1 ^ 2 and ||ri/r|| = maxj j|r 1 r _1 II J ;^|| , by Corollary 4, the 
multiplicative adversary bound is 

MADV, 4C (Search t „) > > + ^ 'o g .-41o g (^)^ 

"' Cl - " log(l + 6(g-l)v^M) " 6(q-l)^2t/Q 12(q-l)y/2fi 

which is > ^Vt^ for q = 2 and C > 2-*/ 8 . □ 



4.3 t-threshold function 

The decision version of the t-fold search problem is the i-threshold function X = {x £ {0, 1}" : \x\ £ {t—1, t}} 
and Thrcsholdi,„(a;) = \x\ — t + 1. Here one can always achieve success probability 1/2 by random guess, 
hence we want to upper-bound the bias from 1/2. The analysis in this section is based on Ambainis's method 
[ASW06] translated to our framework. 

Theorem 10 ([ASW06]) MADVi /2i4C (Threshold ti „) = VL{C \/tn) . 

One may think that the true bound is fi(£\/tn), however we are unable to prove it using this method. It 
is quite hard to analyze the 4x4 matrix in the following proof exactly, and we rather use the simpler bound 
from Corollary 6, which loses exactly this quadratic factor in Lemma 7. We tried to do exact calculations in 
Mathcmatica, but they seem to give the same bound fl(( 2 \/tn) even when using Corollary 4. 
Proof (sketch) We conduct the proof similarly to Theorem 9, but now we use eigenspaces spanned by 
uniform superpositions of both (t — l)-wcight and t- weight strings. Define the following adversary matrix 
with q=l + 41 °g( 2 /C) and A = q t/2. 

r = E '/Mu .. +q t/2 ( E n Sj , + + E n ^,- J . ( 8 ) 

3=0 \j=t/2 3=0 J 
« ' O . -/ 

bad good 

where 5,-,± is spanned by |V>j,±) = =\^(\i>j,o) ± |V\7,i}), 

\i>J,a) = j = E \ x )> 

V \t-l+a-j) x:\x\=t-l+a 
xj=l 

and the tilde and double-dot states are defined as usual. 
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Let us explain the intuition behind this construction. We have to put all minus subspaces inside the 
good subspace of T, otherwise some \v) = |V>j,o) = -^(1^.1,+) + \i>J,-)), for which !|F |w)| = 1, lies in 
Sj t + Sj — C Tbad, and the success probability in the bad subspaces could only be upper-bounded by the 
trivial r\ = 1. This way, all states from bad subspaces lie inside T t / 2 .+ and rj = 1/2. On the other hand, 
we mark the plus subspaces above j > t/2 as good instead of bad, because it allows us to prove a stronger 
bound on the denominator. We do not lose much in the numerator. 

Block-diagonalization of T and Oi Like in the proof of Theorem 9, we naturally decompose the basis 
states \ipj,a) with 1 ^ J onto \4>j,a,b) by fixing the first input bit to b. For the same reasons, some linear 
combinations of these states lie in Sj t ± and Sj+i±. In particular, if for a v = (t>oo, foi> ^lOi ^n) wc let 

denote d o|Vv,o,o) + «oi|^j,o,i> + "loltfoi.o) + thcn r lV> 7 ) = $J) with w = UGjWv [ASW06, 

Claim 17], where 



U = -P 



( "o Po 

Po —oto 

Oil Pi 

\Pi -ot\ 



a p \_ 

Po —oto 

-ai -Pi 
-Pi ai J 



G } = 



(q J 
q 


\0 





3+1 






jt/2 





\ 






t/2 



z = 



1 








°) 





-1 














1 





\o 








-v 



and a a ,Pa for an a G {0,1} (and an implicit index j) are defined by Eqn. (6) with the threshold value 
t := t — 1 + a. In other words, the columns of U are vectors v that put \ipj) inside £■;,+, Sj+i t +, Sj,-, Sj+i,-, 
respectively. Furthermore, the subspaces Sj <a ,b for a, b £ {0, 1}, spanned by \ipj, a ,b), have the same dimension 
and there are 3 unitaries that map IV'j.o.o) — ► \^j,a,b), hence one can form a complete set of orthogonal 
projectors II = {rLy^jj^UlItriv that block-diagonalizes T. Each projector IL;^ is 4-dimensional. Oi is trivially 
block-diagonal in II, because 0x|V>j )O ,6) = {—'L) b \i 1 J,a,b), or, equivalently, Oi\ipj) = with w = Zv. 

Spectral norm of Ti/T on U j>( Recall Ti = O^TOi and denote = TU. jit = UGjU* for some t. Then 

r 0)/ r 0) = TiT' 1 ^ = ZUGjU*Z • UGj 1 U*. 
This matrix is too hard to analyze directly, hence we apply Corollary 6 rather than Corollary 4. Compute 



2|irw o Di 



^ = -||(UG,ir)o^||, 



where Di 



10 1 
10 10 
10 1 
10 10 



Write the matrix (UGjU*) o D± after swapping the second and third row and column as — ^-(#» H q ) with 



a Po(q - 1) a 1 /3 (g* /2 -''' - 1) - a /3i(<Z t/2 ~ 3 - q) 

a Pi(q t/2 -J - 1) - ai/3 (<Z t/2 - J - q) aipi(q - 1) 

1 



ll^ll <(«"!) 



(A>, ft) 



+ (<7 t / 2 - J -l)(a 1 /3o-a ft) 



-1 

1 

-1 



Use a a < 1, and p a < ^Jltjn and \aip - a pi\ = 0(l/y/tn) for j < t/2 [ASW06, Claim 19 and 20]. Then 



substitute q = 1 



41og(2/Q 

t 



and bound A 



7 t/2 



=,21og(2/C) 



4/C 2 



^||<2(,-l)/f + (^_ 1)0 (-L) 



Q(1) .log(2/C)_+4/C 2 =0 



tn 



1 
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We conclude that 

As wc say above, this bound is only valid for j < t/2. However, if j > t/2, then Gj = g*/ 2 l, I^/r^ = I, 
and the analysis in this subspace is trivial. This is exactly the reason why we mark the subspaces Sj,-\. for 
j > t/2 as good. 

Analysis of the trivial subspaces For j G {t — l,t}, the projectors Hj,i have smaller dimension than 
4x4, because there are not enough basis states. In particular, for \J\ = t — 1, there arc only 3 types of 
basis states \i>j,o,o) G St-i,o,o £ St-i,o, and |*0j,i,o) and with a|^j,i,o) + /3|V\7,i,i) € St-i,i and 

/^IV^J, i,o) — "IV'j.i.i) G <5t,i- Hence their linear combinations fall into the following subspaces: (l,a,0) G 
St-i,+ , (l,—a,—0) G St-i,-, and (0,/3, — a) G St,i = St,-- Note that St,- has a different definition than 
other Sj.-, and that there is no subspace St.+. For, |J| = f, the situation is simpler, because there are only 
basis states |V>j,i,o) € St,i,o C S t ,i = St,-- We conclude that even the projectors onto the trivial subspaces 
block-diagonalize T and Oi. 

Now, the actual analysis of the norm of Fi/T on these trivial subspaces is not needed, because T — q l / 2 \ 
on Ht-1,1 or I\-t,i- We conclude that the norm there is exactly 1. 

Multiplicative adversary bound By Corollary 6, using the symmetry over all i and £ 2 A = C 2 <7*^ 2 ~ 4, 

MADV 1/2 . 4C (Threshold^) > log(C 2 A) ■ min ^g^^ = tt(( 2 Vfrl). 

j 2 1 W o Di\\ 



4.4 The OR function 

Let us consider a special case of the i-thrcshold function for t = 1 , the OR function. It is the decision version 
of the search function from Section 4.1. We show a quadratically better lower bound in terms of the error 
probability than the one implied by Theorem 10. 

Theorem 11 MADVi /2 , 4C (OR„) = fi(0\/n) f or C > y/Vn- 

Proof We use the same subspaces and the same adversary matrix T like in Eqn. (8): 

r = n So , + + q- (n So ,_ +n Sl _), 

A = q = 2/C 2 , and the same block-diagonalization like in the proof of Theorem 10. However, we do the 
analysis more carefully, which is feasible thanks to the fact that we only have one nontrivial 3-dimcnsional 
subspace. This subspace is spanned by IV'g 0,0) > IV'B, 1,0)1 and | "00 x 1 ) - I 11 this basis, T = UGU* and Ti = ZrZ, 
where 

/ll \ /1 o\ (1 \ 

U = —= la -a V2/3 , G = q , Z = 1 . 
^ 2 \/3 -/3 -v^a/ \0 ?/ V° -V 

If we applied Corollary 6 on this adversary matrix, we would obtain the same bound as in Theorem 10. We 
instead express TiT -1 = ZUGU*Z ■ UG _1 U* explicitly and get that its eigenvalues are 1 and 



1 + 7 ± vV + 2 7 , where 7= { - ' (2/? 2 -/? 4 ). 
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We plug in the bound f3 < y2/n, expand the Taylor series, and obtain \\TiT 1 || = 1 H — ^— ' + O(^). We 
can neglect the remaining terms when £ > y/2/n. By Corollary 4, 

MADV 1/2 ,4 C (OR„) > - — > — = ^ CV« • 

log(l + 2(q - I) ^/qn) % - 1 



The multiplicative adversary bound for OR is stronger than the additive adversary bound for polynomially 
small success probabilities. Note that success \ + C, corresponds to error \ — C- By Corollary 2, the additive 
adversary bound for OR is 



atw (C\vt \ 1- V(1-2C)(1 + 2Q r- 1- VT^W r~ 1 - (1 - 2C 2 ) r- ,i r 
ADVi_ c (OR„) = v - - y/n = v — y/n « - sjn = Q Vn. 

4.5 Designing F for a general function 

After having presented optimal multiplicative adversary matrices for several problems, let us make a note 
on how to design a good T in general. It seems that we don't have too much freedom. All known good 
multiplicative adversary matrices T have the following structure: T is a linear combination of projectors Sj, 
where Sj is spanned by superpositions of input states consistent with fixing exactly j input variables. This 
matrix is then simultaneously block-diagonalizcd with the query operator. The diagonal blocks typically 
overlap with some adjacent subspaces Sj and Sj+i- To get a good estimate of the spectral norm of such a 
block, the minimal and maximal eigenvalue in this block must not differ too much. On the other hand, we 
want the spectral norm of T be as large as possible, hence an optimal choice of the multiplicative coefficients 
seems to be q J Hs j for some constant <j, or more generally (H J i=1 q i )Tls j , with q^ different in each subspace Si 
if the subspaces for different i have significantly different properties. 

The real difficulty seems to lie not in designing good subspaces Sj, but in their combinatorial analysis. 



5 Direct product theorems 

In this section we investigate the complexity of evaluating a function / on k independent instances simulta- 
neously. We prove that the multiplicative adversary bound satisfies a strong direct product theorem (DPT). 
Roughly speaking it says that if we are asked to compute / on k independent inputs in time less than k 
times the time for one instance, then the success probability goes exponentially down. Ambainis [ASW06] 
proved a DPT for ^-threshold using these techniques. Here we show that his proof actually gives a DPT for 
any function that has a multiplicative adversary lower bound. 

For a function / : X -> S with X C £'/ and k > 1, let /W : X k ->• T, h such that /(an, .. .,x k ) = 
(f(xi), . . . , /(xfe)). An algorithm succeeds with computing if all individual instances are computed right. 

Theorem 12 For every function f with rj < \, and k > 361, MADV^/s.^/io (/ (fc) ) > ^ • MADV I)i4C (/). 

Proof Let T, X denote the optimal multiplicative adversary matrix for / with success n, and its threshold 
value for good subspaces. We construct T', A' for p k > as follows [ASW06, Appendix A.l]: 

p/ _ p®fc y _ \^k/lQ 

We prove that max^p ||r^, /T'|| = max !iP ||r^ p /r||. This is because, for an i' = jn + i, p = 0*, T'0i^ p 
with 0i' jP = l^'oOi.pOl®^- 1 -^, and thus V' V JY' = I®-* ® (r i)P /r) <g> l®^- 1 ^'). Therefore, by Corollary 4, 
if we choose £' = C °j the multiplicative adversary bound is 

MADW/W) > = * • ^ = A • MADV, i4c(/ ). 

log(maxi, p llr^/r'll; 10 log(maxi,p lir^p/ril) 10 

It remains to analyze the success rf of the composed function f( k > in the bad subspaces. 
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Upper-bounding rf Let Tb a d,Tgood denote the bad and good subspace of T. For a v £ {bad, good} fe , let 
€ T Vl ® • • • g) T„ fe be a product quantum state such that ||r'|<^)|| < A'. Since all eigenvalues of T are at 
least 1, if a subspace of V corresponds to an eigenvalue less than A', only less than fc/10 individual subspaces 
out of k can be the good ones. This means that more than 9fc/10 instances lie in the bad eigenspacc of T 
and have thus success probability at most r\. Since \<p) is a product state, the total success probability of 
computing all instances right is at most rf k / 10 . We, however, have to upper-bound the success probability 
for all superposition states than can come from different combinations of T Vi 's. In general, 

\ip) = a v \ip v ), where \<p v ) € T V1 ® ■ ■ ■ ® T Vk and \v\ denotes #good subspaces. 

«G{bad,good} fc 

M<fc/io 

Our assumption about / is that ||F 2 |?;)|| 2 < 77 for every z and \v) 6 Tb a d- Thus 

n(F Z1 ® ■ ■ ■ ® f z ji^)ii 2 = 11 n F,J^)II 2 



< (Eki 2 ) • (EIIii f -»k 



< ! . J2 1 

v.\v\<k/W 
fc/10 



^gfc/io 



gGX./to)^ 10 (;)^(t)' 



< k{10e) k ' w rf k ' w 



fev^IOe 7 < 2 fe / 2 for fc > 361 
< 2 fc /2 7? fc/2 7? 2fc/5 ?? < 1 

Note that in the case of the i-threshold function as the base function, the success probability is r\ = | in 
both bad (plus) and good (minus) subspaces, hence we could use a stronger bound 2 _fc instead of r) 9k ' 10 . 
There is nothing special about the constant k > 361; the DPT holds for all k, but we have to take into 
account the multiplicative factor of k in the success rj . 

We conclude that MADV^ t/5 ^/i»(/) > i • MXDV vA( (f). □ 

This technique also allows us to prove the direct product theorem when the k instances are distinct 
functions. 
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